CVE-2000-0169

Description

Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.

Affected products

• oracle / application_server4.0 – 4.0

References

• MISChttp://www.securityfocus.com/bid/1053
• MISChttp://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0211.html